VoIP Ethernet Capture on FreeSBC
From TBwiki
Revision as of 09:10, 23 August 2019 by Nicole Tan (Talk | contribs)
Applies to version(s): v3.0, v3.1
Capturing VoIP and Ethernet traffic
- Connect to the FreeSBC using a ssh connection
- Start tbx_cli_tools_remote (type "tbx_cli_tools_remote")
The following is displayed:
Available remote hosts to control (TBX_GW_PORT=12358, local IPs 172.16.0.1 / 172.18.0.1). Press corresponding letter to control: a : TB016634.tbrouter b : TB016635.gateway c : TB016635.logtrace d : TB016635.stream_server e : TB016635.tboam_app f : TB016635.tbrouter <------------tbrouter g : TB016635.tbsnmpagent h : TB016635.tbsyslog i : TB016635.tbuctwriter j : TB016635.toolpack_engine k : TB016635.toolpack_sys_mgr l : TB016635.web_server
- Connect to the tbrouter application
- Start capture using the 'p' key (lowercase p), leave default parameters and press 'enter'
- Stop capture using the 'p' key
Retrieve VoIP captures
VoIP capture files (pcap/Wireshark compatible) are locate here:
/lib/tb/toolpack/tbrouter/pcap
To download the voip capture file, use sFTP on the management port. This can be done on Windows using tools like Filezilla or WinSCP. Note: There can be multiple capture files per capture session (for example, on systems with 10Gbps network devices, because Ethernet packets on these devices are spread to multiple packets processing/capture cores)